CVE-2016-5958 - CVE House
Back to Database
Status published High CVE-2016-5958

IBM Security Privileged Identity Manager could allow a remote attacker...

Vulnerability Description

IBM Security Privileged Identity Manager could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-5958

Credits & Attribution

No credits recorded in the NVD database.

References

More from IBM Corporation

View All →
CVE-2019-4392
HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials...
Critical 9.8
CVE-2019-4301
BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution...
High 8.4
CVE-2017-1320
IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site...
Medium 5.4
CVE-2017-1289
IBM SDK, Java Technology Edition is vulnerable XML External Entity...
High 8.2
CVE-2017-1282
IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable...
Medium 5.4

Affected Vendor

IBM Corporation

View all reports →

Affected Software

Privileged Identity Manager
Vulnerable Versions:
1.0.1, 1.0.1.1, 2.0.0, 2.0.1, 2.0.2, 2.1.0

Timeline

Official Publish: February 1st, 2017
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.